PRIVACY NOTICE

Last updated: October 29, 2026

Who handles personal information

This notice explains personal information handling by Shanghai Tianhao Industrial Co., Ltd., the operator of Zelvarab. It covers visitors, shoppers and people contacting support in connection with the storefront and customer relationships. The terms “we”, “us” and “our” refer to this company.

Information provided and received

Information supplied by you may include your name, email, telephone number, billing and delivery addresses, order selections, messages, return evidence and account details if you create an account. Payment services process payment credentials. We receive payment status, references and limited method details needed to verify and reconcile transactions. Do not email full card details.

Technical information may include IP address, browser and device characteristics, access times, referral pages, interactions and cookie identifiers. Optional analytics or advertising data depends on the tools actually enabled and applicable privacy choices. Carriers and payment providers may supply delivery updates and proportionate security indicators.

How information is used

Order information is used to take payments, supply goods, send necessary service messages and manage enquiries and returns. Where relevant, this processing performs a contract or requested steps before entering one.

Security and transaction records support fraud prevention, required accounting and dispute resolution. Depending on applicable law, processing relies on legal obligations or legitimate interests balanced against your rights. Consent is used for optional tracking and marketing where required. You may withdraw consent without affecting earlier lawful processing.

Parties receiving information

Shopify supports hosting, checkout and store administration. Payment providers handle transactions and related security checks. Carriers and fulfillment partners receive information needed to prepare and deliver parcels. Technical, email, support and security providers may process information for their service functions.

Where activated, analytics providers receive relevant browsing and device information. Advertising partners may receive identifiers and events for measurement or targeted advertising, subject to required consent and opt-outs. Such disclosure may constitute “sale” or “sharing” under some laws even without monetary payment. We do not sell customer mailing lists for cash.

Necessary information may also be disclosed to authorities where required by law, confidential professional advisers, or recipients involved in a business transfer under applicable protections. Shopify and some payment services may independently determine certain uses of information. Their own notices describe those activities. Shopify's consumer notice is available at https://www.shopify.com/legal/privacy/consumers.

Cookies and available choices

Essential cookies enable functions including checkout, security and remembering privacy choices. Optional tools may store settings, measure visits or support advertising. A tool that requires consent must not activate before consent is given. Scrolling, dismissing a notice or continuing to browse does not establish required consent.

Use any displayed preference tool to review the optional categories it controls. Email service@zelvarab.com if you cannot locate a relevant control or wish to make a request. Browser settings may remove or block cookies, although essential store functions may be affected. An email or browser setting does not necessarily control every third-party tracking service.

Recognized Global Privacy Control signals must be honored where legally required for the associated browser. Other browsers or devices may need a separate choice. Marketing messages offer an unsubscribe route; necessary order messages may continue.

Keeping and safeguarding records

Order and financial records are retained for applicable accounting, tax and consumer-law periods. Longer retention must have a reasonable basis, such as an unresolved claim or legal hold. Support correspondence is retained while needed to address the issue and for a proportionate follow-up period. Optional identifiers follow relevant settings and legal requirements. Contact us for criteria applying to a specific record.

We use reasonable technical and organizational safeguards, including access controls. No online system can guarantee absolute security. Information incidents are addressed and notified as required by applicable law.

Processing in other countries

Our operator is based in China. Information may be processed in China and countries used by Shopify or other providers, where privacy rules may differ. Where transfer restrictions apply, appropriate legal mechanisms and additional required safeguards must be used. Ask us about arrangements affecting your information. Purchasing does not waive international-transfer protections.

Exercising information rights

Applicable law may allow you to access, receive a copy, correct, delete or port information; restrict or object to processing; withdraw consent; or opt out of sale, sharing or targeted advertising. California residents may also have rights about processing categories, sources, recipients and certain uses of sensitive information where applicable.

Send “Privacy request” enquiries to service@zelvarab.com. We may use proportionate identity checks and accept authorized agents where required. Verification is not required for browser opt-outs where the law prohibits it. Applicable response deadlines govern, normally including one month for GDPR or UK GDPR requests and 45 days under applicable United States state laws. Any permitted extension or refusal will be explained.

We do not unlawfully discriminate against a person exercising privacy rights. Where an appeal right applies, reply with “Privacy appeal”. We will provide the outcome and required further complaint information. You may also contact a competent regulator. Ask support for review and information about applicable rights if an automated order or fraud decision affects you.

Children and notice updates

The store is intended for adult purchasers. Notify us if a child may have submitted information so we can investigate and take legally required action. Children's information must not be used for marketing, sale or sharing contrary to applicable protections.

Revisions are identified by the update date, with additional notice where required. Revised wording does not remove existing rights.

Privacy contact

Shanghai Tianhao Industrial Co., Ltd., operating as Zelvarab.

Registered business address: Room 101 (J), No. 12, Lane 1661, Jialuo Highway, Jiading District, Shanghai, China.

Email: service@zelvarab.com

Telephone: +852 6796 5731